KR20140043556A - Apparatus and method for analyzing system usage - Google Patents

Abstract

An apparatus and a method for analyzing system usage are disclosed. According to the present invention, future usage of system resources can be predicted by a system access log and system resource usage. The apparatus of the present invention analyzes a correlation between system usage analysis data and system resources usage data, acquires a system usage analysis graph, and predicts an amount of system resources required when transactions or simultaneous accesses increases. [Reference numerals] (AA) Start; (BB) End; (S1010) Acquire a system access data and a system resource usage data; (S1030) Acquire a system usage analysis data through the system access data; (S1050) Acquire a system usage analysis graph by analyzing a correlation between the system usage analysis data and the system resource usage data; (S1070) Predict an amount of a system usage through the system usage analysis graph

Description

Apparatus and method for analyzing system usage}

The present invention relates to an apparatus and method for analyzing system usage, and more particularly, to an apparatus and method for predicting future usage of system resources through system access log and system resource usage.

For the existing system usage analysis and regression analysis, iterative work using excel for a large number of large access logs must be performed for a long time. In addition, when generating basic data for system usage analysis and regression analysis, there is an inconvenience in that the same analysis work must be performed every time using the Excel for each access log file of the target system. There is a problem that the productivity is lowered and the accuracy is lowered.

KR 10-0758476 (POSCO Co., Ltd.) September 6, 2007 Patent document 1 is a security log analysis apparatus and method for a process control system. Patent document 1 includes one or more intrusion detection logs generated by an intrusion detection system. It is disclosed that the integrated warning message is generated by integrating the message into a message, and the related warning message is generated by analyzing the correlation between the generated integrated warning message and the information of the process control system and reporting the result to the manager. KR 10-2012-0003567 (Jin-hwan Choi, Bong-hyun Baek) January 11, 2012 Patent Literature 2 is a recording medium storing a log management system, a log processing method thereof, and a log processing method thereof, and Patent Document 2 automatically records a log management system. By saving raw logs according to various log formats in a log storage database in the form of extensible markup language (XML), the contents of saving human and time resources required for analysis such as searching for illegal file leakers are disclosed.

The technical problem to be achieved by the present invention is to record a system usage analysis apparatus and method for predicting future usage of system resources through a system access log and system resource usage and a program for executing the system usage analysis method on a computer. It is to provide a computer-readable recording medium.

The system usage analysis apparatus according to the present invention for achieving the above technical problem, the system access data is recorded the information on the user terminal connected to the system and the temporary usage information for the resource (resource) of the system is recorded A system usage information acquisition unit for acquiring system resource usage data; And a system usage analysis unit for acquiring system usage analysis data by analyzing the system access data in record units, and analyzing a correlation between the system usage analysis data and the system resource usage data to obtain a system usage analysis graph. Include.

The system usage analysis method according to the present invention for achieving the above technical problem, the system access data in which information about the user terminal connected to the system is recorded and the system resource usage in which the temporary usage information for the resources of the system is recorded Obtaining data; Analyzing the system access data in record units to obtain system usage analysis data; And analyzing a correlation between the system usage analysis data and the system resource usage data to obtain a system usage analysis graph.

According to another aspect of the present invention, there is provided a computer readable medium storing a program for causing a computer to execute any one of the above methods.

According to the system usage analysis apparatus and method according to the present invention, the system usage analysis graph obtained by analyzing the correlation between the system usage analysis data and the system resource usage data through the system usage analysis graph to increase the amount of transactions required You can estimate the amount of resources. Accordingly, it can be used as a reference when performing maintenance / upgrade of the system.

1 is a block diagram illustrating a system usage analysis apparatus according to a preferred embodiment of the present invention;
2 is a block diagram showing in more detail the configuration of a system usage analysis apparatus according to a preferred embodiment of the present invention;
3 is a view for explaining a process of separating system access data according to a preferred embodiment of the present invention;
4 is a view for explaining a process of obtaining system usage analysis data according to a preferred embodiment of the present invention;
5 is a graph showing the number of transactions per day and CPU usage according to an embodiment of the present invention;
6 is a graph showing the number of concurrent users and CPU usage per date according to an embodiment of the present invention;
7 to 8 are views for explaining a process of obtaining a system usage analysis graph in accordance with a preferred embodiment of the present invention;
9 is a view for explaining an example of system resource usage predicted through a system usage analysis graph according to a preferred embodiment of the present invention;
10 is a flowchart illustrating a system usage analysis method according to a preferred embodiment of the present invention.

Hereinafter, exemplary embodiments of a system usage analysis apparatus and method according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram illustrating a system usage analysis apparatus according to a preferred embodiment of the present invention.

Referring to FIG. 1, the system usage analysis apparatus 100 according to an exemplary embodiment of the present invention may include a plurality of servers 200-1 to 200-n and a plurality of user terminals 300-1 through a communication network 400. 300-n). Meanwhile, although the system usage analysis apparatus 100 and the servers 200-1 to 200-n are devices that are independent of each other and are connected to each other through the communication network 400, the system usage analysis apparatus 100 is not limited thereto. The usage analysis apparatus 100 may be implemented in an integral form with the servers 200-1 to 200-n, or the system usage analysis apparatus 100 may be directly connected to the servers 200-1 to 200-n by wire or wireless. .

The system usage analysis apparatus 100 predicts future usage of system resources through a system access log and system resource usage. Here, the system refers to a web system, a C / S system, and the like. Web system consists of web server, WAS server, DB server, etc., and C / S system consists of client, middleware server. That is, the system may consist of one server or two or more servers.

In this case, the system usage analysis apparatus 100 may receive system access data and system resource usage data from the system. Here, the system access data includes date and time information that the user terminal accesses the system, address information (eg, an 'IP address') for identifying the user terminal, application information requested by the user terminal, and the like. The system resource usage data includes temporary usage information of resources of the system. Resources include a central processing unit (CPU), memory, running queues, file I / O, network I / O, and the like.

Of course, the system usage analysis apparatus 100 may receive system access data and system resource usage data stored in the system by an administrator.

Servers 200-1 to 200-n are devices that provide various services such as email, search, news, video streaming, music streaming, and games. For example, the servers 200-1 to 200-n include a web server, a WAS server, an application server, a CS server, a DB server, a game server, a communication server, and the like.

The servers 200-1 to 200-n record information about the user terminals 300-1 to 300-n in the system access data when the user terminals 300-1 to 300-n are connected. That is, when the user terminals 300-1 to 300-n are connected to the servers 200-1 to 200-n, the servers 200-1 to 200-n identify the date and time when the user terminal is connected. The information including items such as an address which can be made and an application requested by the application by the user terminal is recorded in the system access data in record units. For example, the system access data refers to an 'access log' stored in the servers 200-1 to 200-n.

In addition, the servers 200-1 to 200-n record the temporary usage information of the server's resources in the system resource usage data. For example, the system resource usage data includes CPU usage, memory usage, running queues, file I / O status, network I / O status, and running process status. That is, the system resource usage data refers to log data that can be obtained by commands such as 'vmstat', 'sar', 'iostat', and 'netstat'.

The user terminals 300-1 to 300-n are devices that use services by accessing the servers 200-1 to 200-n by a user's operation. The user terminals 300-1 to 300-n include televisions, computers, tablet PCs, personal digital assistants (PDAs), and portable multimedia players (PMPs). , Mobile phones, smart phones and the like.

The communication network 400 may include a data communication network including a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN) It does not matter whether it is wired or wireless, and any communication method can be used.

2 is a block diagram showing in more detail the configuration of a system usage analysis apparatus according to a preferred embodiment of the present invention.

2, the system usage analysis apparatus 100 includes a system usage information acquisition unit 110, a system usage analysis unit 130, and a system usage prediction unit 150.

The system usage information acquisition unit 110 acquires system access data and system resource usage data of the system. That is, the system usage information acquisition unit 110 may receive system access data and system resource usage data from the system. In addition, the system usage information acquisition unit 110 may receive system access data and system resource usage data by a manager's operation.

The system usage analysis unit 130 obtains system usage analysis data by analyzing the system access data acquired through the system usage information acquisition unit 110 in record units. Here, the system usage analysis data includes at least one of the number of transactions per day, the number of temporary users, and the frequency of calls per application.

3 is a diagram for describing a process of separating system access data according to a preferred embodiment of the present invention.

The system usage analysis unit 130 analyzes the system access data AD in record units. For example, the system usage analyzer 130 may separate the system access data AD into a temporary token DT, an address token IT, and an application token AT in record units. The system usage analyzer 130 performs such a separation operation on all records included in the system access data AD.

In this case, the system usage analysis unit 130 may receive a token separation criterion by the administrator, and may analyze the system access data AD in record units according to the input token separation criterion to separate the plurality of tokens. For example, the system usage analyzer 130 may separate the system access data AD into a temporary token DT, an address token IT, and an application token AT according to the input token separation criteria. Here, the token separation criterion is information on an area in which various types of information such as date information, address information, application information, and the like are recorded, and refers to the starting position of each area and the size of each area.

In addition, the system usage analysis unit 130 may analyze the system access data AD in record units using format data corresponding to the system access data AD and separate the system access data AD into a plurality of tokens. For example, the system usage analyzer 130 may separate the system access data AD into a temporary token DT, an address token IT, and an application token AT using the format data. Here, the format data refers to a format of information recorded in record units in the system access data AD.

FIG. 4 is a diagram illustrating a process of acquiring system usage analysis data according to a preferred embodiment of the present invention. FIG. 5 is a graph showing the number of transactions per day and CPU usage according to a preferred embodiment of the present invention. Is a graph showing the number of simultaneous concurrent users and the CPU usage according to the preferred embodiment of the present invention.

The system usage analysis unit 130 may obtain system usage analysis data (refer to FIG. 4A) consisting of the number of transactions and the number of users per day. In addition, the system usage analysis unit 130 may obtain system usage analysis data (see FIG. 4B) of the call frequency for each application.

In addition, the system usage analysis unit 130 may display the system usage analysis data (see FIG. 4A), which consists of the number of transactions per day, in a graph form (see FIG. 5) together with the daily CPU usage. In addition, the system usage analysis unit 130 may display the system usage analysis data (see FIG. 4 (a)), which consists of the number of concurrent users per day, in a graph form (see FIG. 6) together with the daily CPU usage. Meanwhile, although graphs showing CPU usage together with the number of transactions and the number of concurrent users per day are illustrated in FIGS. 5 and 6, this is only an example and other resources of the system such as memory may be equally represented.

The system usage analyzer 130 analyzes a correlation between the system usage analysis data and the system resource usage data to obtain a system usage analysis graph. Here, the system usage analysis graph is a graph showing the resource usage of the system according to the number of transactions or the number of users. That is, the system usage analysis unit 130 may obtain a system usage analysis graph by performing a regression analysis using the system usage analysis data and the system resource usage data as variables.

In addition, the system usage analysis unit 130 uses the system usage analysis data and the system resource usage data to determine the date and time when the most users were simultaneously generated, the date and time when the most transactions occurred, and the average usage of system resources used by the users. Can be analyzed.

7 to 8 are diagrams for explaining a process of obtaining a system usage analysis graph according to a preferred embodiment of the present invention.

Referring to FIG. 7, the system usage analysis unit 130 may obtain a first system usage analysis graph (refer to FIG. 7A) by performing a regression analysis using the number of transactions per day and the CPU usage per day as variables. Can be. In addition, the system usage analysis unit 130 may analyze information (see (b) of FIG. 7) such as the maximum number of transactions, the date and time when the maximum transaction occurs, and the CPU utilization rate when the maximum transaction occurs.

Referring to FIG. 8, the system usage analysis unit 130 obtains a second system usage analysis graph (see (a) of FIG. 8) by performing a regression analysis using the number of concurrent users per day and the CPU usage per day as variables. can do. In addition, the system usage analysis unit 130 may analyze information such as the maximum number of concurrent users, the date and time when the maximum simultaneous connection occurs, and the CPU utilization rate when the maximum simultaneous connection occurs (see FIG. 8B). .

Meanwhile, although graphs obtained by performing regression analysis on the number of transactions per day or the number of concurrent users per day using CPU usage are illustrated in FIGS. 7 and 8, this is only one example and other resources of the system such as memory may be used. The same can be used.

In addition, the system usage analyzer 130 may analyze a time interval in which the same user terminals 300-1 to 300-n access the system. That is, a time interval refers to an interval between requests when a user requests a system. For example, if the number of transactions occurring at '12: 01 'is' 100 'and the number of concurrent users is' 10 ', then 10 transactions per person are generated at '12: 01'. Since 10 transactions occurred in 60 seconds, it can be analyzed that the user made a request every 6 seconds.

The system usage predicting unit 150 predicts the usage of the system through the system usage analysis graph obtained by the system usage analyzing unit 130. That is, the system usage predicting unit 150 may be configured according to the resource usage prediction amount of the system according to the expected number of accessors when the maximum number of concurrent users of the system is exceeded, and the transaction count expected when the maximum number of concurrent transactions of the system is exceeded. A system usage analysis graph may be analyzed based on a system usage analysis graph to predict the usage of the system.

9 is a diagram illustrating an example of system resource usage predicted through a system usage analysis graph according to a preferred embodiment of the present invention.

Referring to (a) of FIG. 9, when the transaction increases to '120%', '140%', '160%', '180%' and '200%', respectively, the CPU usage prediction amount is '116.4712%', respectively. ',' 135,4559% ',' 154.4405% ',' 173.4252% 'and' 192.4098% '. Referring to (b) of FIG. 9, when the concurrent connection increases to '120%', '140%', '160%', '180%' and '200%', respectively, the CPU usage prediction amount is '110.4639', respectively. % ',' 128.3649% ',' 146.2659% ',' 164.1669% 'and' 182.0679% '.

As such, when a transaction or concurrent connection is increased through the system usage analysis graph obtained by analyzing the correlation between the system usage analysis data and the system resource usage data, the amount of resources of the system may be estimated. Accordingly, it can be used as a reference when performing maintenance / upgrade of the system.

10 is a flowchart illustrating a system usage analysis method according to a preferred embodiment of the present invention.

The system usage analysis apparatus 100 obtains system access data and system resource usage data of the system (S1010). In this case, the system usage analysis apparatus 100 may receive system access data and system resource usage data from the system, or receive system access data and system resource usage data by an administrator's operation.

In operation S1030, the system usage analysis apparatus 100 obtains system usage analysis data through system access data. That is, the system usage analysis apparatus 100 may obtain system usage analysis data by analyzing system access data in record units. In this case, the system usage analysis apparatus 100 may separate the system access data into tokens according to the token separation criteria input by the administrator, or may separate the system access data into tokens using format data corresponding to the system access data. .

Then, the system usage analysis apparatus 100 obtains a system usage analysis graph by analyzing a correlation between the system usage analysis data and the system resource usage data (S1050). That is, the system usage analysis apparatus 100 may obtain a system usage analysis graph by performing a regression analysis using the system usage analysis data and the system resource usage data as variables.

Thereafter, the system usage analysis apparatus 100 predicts the usage of the system through the system usage analysis graph (S1070). That is, the system usage analysis apparatus 100 may be configured according to the estimated amount of resource usage of the system according to the expected number of concurrent users when the maximum number of concurrent users of the system is exceeded, or the number of transactions expected when the maximum number of concurrent transactions of the system is exceeded. A system usage analysis graph may be analyzed based on a system usage analysis graph to predict the usage of the system.

The present invention can also be embodied as computer-readable codes on a computer-readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer apparatus is stored. Examples of the computer-readable recording medium include a ROM, a RAM, a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, and the like in the form of a carrier wave . In addition, the computer-readable recording medium may be distributed to computer devices connected to a wired / wireless communication network, and a computer-readable code may be stored and executed in a distributed manner.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be understood by those skilled in the art that various changes may be made and equivalents may be substituted without departing from the scope of the appended claims.

100: system usage analysis device, 200-1 to 200-n: server,
300-1 to 300-n: user terminal, 400: communication network

Claims (19)

A system usage information acquisition unit for acquiring system access data in which information about a user terminal connected to a system is recorded and system resource usage data in which temporary usage information of resources of the system is recorded; And
A system usage analysis unit for acquiring system usage analysis data by analyzing the system access data in record units, and analyzing a correlation between the system usage analysis data and the system resource usage data to obtain a system usage analysis graph; System usage analysis apparatus, characterized in that. The method according to claim 1,
The system access data includes system date and time information that the user terminal accesses the system, address information for identifying the user terminal, and application information requested by the user terminal. 3. The method of claim 2,
The system usage analysis data comprises at least one of the number of transactions (temporary transaction), the number of temporary users and the call frequency for each application (application). The method of claim 3,
And the system usage analysis unit obtains the system usage analysis graph by performing a regression analysis using the system usage analysis data and the system resource usage data as variables. 5. The method of claim 4,
The system usage analysis graph is a system usage analysis apparatus, characterized in that the graph showing the resource usage of the system according to the number of transactions (transaction) or the number of users. The method of claim 3,
Of the resource usage prediction amount of the system according to the expected number of users when the maximum number of concurrent users of the system is exceeded and the resource usage prediction amount of the system according to the expected number of transactions when the maximum number of concurrent transactions of the system is exceeded And a system usage predicting unit configured to predict at least one of the system usage by analyzing at least one of the system usage analysis graphs. The method of claim 3,
And the system usage analysis unit further analyzes at least one of a date and time when the most users are simultaneously generated, a date and time when the most transactions are simultaneously generated, and an average usage amount of the system resources used by the accessor. The method of claim 3,
And the system usage analysis unit further analyzes a time interval in which the same user terminal accesses the system. The method according to claim 1,
The system resource usage data includes a central processing unit (CPU), memory, a running queue, file I / O and network I / O of the system. System usage analysis apparatus comprising the temporary usage information for at least one of the. Obtaining system access data in which information on a user terminal connected to a system is recorded and system resource usage data in which temporary usage information of resources of the system is recorded;
Analyzing the system access data in record units to obtain system usage analysis data; And
And analyzing a correlation between the system usage analysis data and the system resource usage data to obtain a system usage analysis graph. 11. The method of claim 10,
The system access data may include date and time information that the user terminal accesses the system, address information for identifying the user terminal, and application information requested by the user terminal. 12. The method of claim 11,
The system usage analysis data comprises at least one of the number of transactions per day, the number of temporary users and the frequency of call per application. 13. The method of claim 12,
In the graph obtaining step, the system usage analysis method characterized in that to obtain the system usage analysis graph by performing a regression analysis using the system usage analysis data and the system resource usage data as a variable. 14. The method of claim 13,
The system usage analysis graph is a system usage analysis method, characterized in that the graph showing the resource usage of the system according to the number of transactions or the number of users. 13. The method of claim 12,
Of the resource usage prediction amount of the system according to the expected number of users when the maximum number of concurrent users of the system is exceeded and the resource usage prediction amount of the system according to the expected number of transactions when the maximum number of concurrent transactions of the system is exceeded Predicting usage of the system by analyzing at least one of the system usage analysis graphs. 13. The method of claim 12,
And analyzing at least one of a date and time when the most users are connected, a date and time when the most transactions occur at the same time, and an average usage amount of the system resources used by the accessor. 13. The method of claim 12,
And analyzing a time interval during which the same user terminal accesses the system. 11. The method of claim 10,
And the system resource usage data includes temporary usage information of at least one of a central processing unit, a memory, a running queue, a file input / output, and a network input / output of the system. A computer-readable recording medium having recorded thereon a program for executing the system usage analysis method according to any one of claims 10 to 18 on a computer.

Images